theodi/open-data-certificate

Dependabot can't resolve your Ruby dependency files

Closed this issue · 2 comments

dependabot-preview commented

Dependabot can't resolve your Ruby dependency files.

As a result, Dependabot couldn't update any of your dependencies.

This is usually caused by one of your dependencies having been removed (yanked) from its source, by a git reference having been deleted, or by a manual edit to your dependency lock file.

To fully diagnose the issue, try running a manual install locally.

greysteil commented

@Floppy - FYI, I'm seeing this on a few repos Dependabot works on. If you look in your Gemfile.lock and search for thor you'll find the following lines:

thor (~> 0.19.4)

and

thor (0.20.0)

Obviously that should never happen, but it looks like prior to Bundler 1.16.0 Bundler sometimes generated these bogus lockfiles.

If you run bundle update thor and commit the result it should fix things.

Floppy commented

Thanks, that looks like it's fixed it!